VULNERABILITY INTELLIGENCE

CVE-2024-11858

CVSS score8.6 HIGH
EPSS probability0.79%
CISA KEVNot currently listed
Published2024-12-15
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Description

A flaw was found in Radare2, which contains a command injection vulnerability caused by insufficient input validation when handling Pebble Application files. Maliciously crafted inputs can inject shell commands during command parsing, leading to unintended behavior during file processing​

Weakness classification

  • patrick@puiterwijk.org: CWE-78

Primary references